Firefox 3.0 may Block Sites Fingered by Google

Sites that Google has determined to be housing malware would be blocked by a feature under discussion for the next major release of Firefox.

Mozilla Corp. is considering adding a tool to Firefox 3.0 that would automatically block Web sites thought to harbor malicious downloads, but the company's security chief refused to spell out details, saying Mozilla is "not ready to talk about the feature."

Even so, there are numerous details to be found on a blog by a Firefox designer and in a back-and-forth discussion of the feature in Bugzilla, the management system that Mozilla uses to track changes in its software. Together, the two offer a behind-the-scenes look into Mozilla's open-source development process.

"Similar to how Firefox 2 blocks Web sites that are potentially going to try to steal your personal information, Firefox 3 will block Web sites that we believe are going to try to install malicious programs on your computer," said Alex Faaborg, a user experience designer in a blog entry last week. "Mozilla is coordinating with Google on this feature."

And in a Bugzilla entry that offers comments from Mozilla and Google employees -- including Chris Hofmann, Mozilla's director of engineering, and Mike Shaver, its director of ecosystem development -- information is even more free-flowing about malicious site blocking in the next major update to Firefox.

The discussion centers on how Firefox 3.0 will warn or alert users to a potentially malicious site. Faaborg mocks up a warning notice, then someone else offers up another option entitled "Scarier error page". But at times the thread lingers on technical issues.

"If a site does not appear in the blacklist but the response from Google says 'this is a malware site,' will Firefox stop showing the page immediately and load this error page in its place?" asked Jesse Ruderman, a PhD student at the University of California, San Diego, and a unpaid Firefox developer.

"I think the plan for malware is to only use the local lists so we don't have to slow down page load or unload a page (which would probably be too late anyway)," replied Tony Chang, one of the Google software engineers who works full-time on Firefox.

"This is an example of how development goes on [at Mozilla]," said Window Snyder, the company's chief security officer. "This is a great example of working with the [open-source] community" in a give-and-take atmosphere where ideas are batted back and forth, she added.

Still, she wouldn't commit Mozilla to adding a malicious blocking tool to the anti-phishing filter already present in Firefox. "It's definitely one of the things we're looking at," Snyder acknowledged, while noting that the feature is currently rated P2 (Priority 2). By Mozilla's definitions, only P1 features are mandatory for Firefox 3.0.

If the security tool makes it into Firefox 3.0's final build, Mozilla will rely on long-time partner Google to provide the blocking blacklists. Google already does that for Firefox 2.0's anti-phishing feature, which is powered by the search giant's open-source "Safe Browsing" code. (Safe Browsing was offered as a separate plug-in for Firefox before Version 2.0, then baked into the Google Toolbar for Firefox.)

But comments made by developers, designers and others on Bugzilla show that Mozilla has questions about the Google technology. "Will the google malware blacklist include sites that are known to be exploiting just Firefox, or IE, or all browsers?" queried Chris Hofmann. "Do we need to make that distinction and/or communicate it to the user so we don't overstep our bounds?"

"What we are actually doing here is giving Google veto power over any web page. Hmm..." added Gervase Markham, a lead developer for Bugzilla.

Google warns its search engine users of potentially dangerous sites with an interstitial page. Google's current blacklists, and presumably those downloaded to Firefox browsers, come from StopBadware.org, a group created by Google, Chinese computer maker Lenovo Group Ltd., and Sun Microsystems Inc. that collects flagged URLs. Some Web sites, however, including one associated with a in Kansas educational service center, have complained that Google erroneously blocks their sites.

No other browser currently includes an integrated tool for blocking sites flagged for downloading malicious code. When asked if Mozilla sees this as a chance to pull away from the competition, Snyder said: "We're always looking for ways to keep our users safe."

Mozilla's developers have until mid-July to add the feature to Firefox 3.0. According to Mozilla's development schedule, the browser will be feature-frozen for Beta 1 on July 17.

That urgency was communicated by at least one Bugzilla commenter. "Alex's design depends on being able to render error messages as he mocked up, which I'd love to see, but am not sure we can do," said Mozilla's Mike Beltzer. "We need to scope and determine that feasibility pretty damned quickly, IMO."

Testing a website for spyware, spam, viruses and online scams

To check if a website is safe for surfing, use the McAfee Site Advisor.

Simply go to http://www.siteadvisor.com and enter the website's address. It is also available as an add-on for Internet Explorer or FireFox browsers, and it is totally free. Safe surfing, everyone!

Disabling the ability for a computer to download

This tip is very useful for internet cafes and companies that need to set up computer terminals that don't allow customer to download any file from the Internet.

Follow the following steps :-
1) Click start Menu>Run
2) Type "Regedit" and press Enter
3) Go to
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre nt Version\Internet Setting\Zones\3
4) Double Click at "1803" and Change "Value Data is 3" then press OK

How to protect your computer from hackers

The internet in this day and age is fraught with all manner of dangers for your computer-there are viruses and worms to worry about, as well as all manner of spyware; there are identity thieves and con artists-but the most publicized danger on the internet has always been the hacker.

Hackers seem to be everywhere-at least, if you believe the advertisements-but there are a few simple steps that you can take to keep yourself safe from most of their attentions. They're not foolproof, by any means, but by following these steps, you can greatly reduce your vulnerability.

First, have a fully updated antivirus program-the well-known ones are Norton and McAfee, but a company called AVG has a good one that they'll let you have for free. While it doesn't specifically protect against hackers per se, many hackers have been known to look for infected computers to exploit for their own purposes.

Second, have a firewall. If you run windows XP, the built-in firewall may be enough. You'll want to restrict as much as you can, leaving only the openings that you absolutely need to use for your programs that communicate with the internet. A firewall will prevent a hacker from accessing many of the usual avenues used to exploit your computer.

Third, make sure to have the latest security updates distributed by the manufacturer of your operating system. It's often a hassle to have to keep updating the operating system, sometimes weekly, but it's necessary if you want to keep your computer properly safe; most of the ways that a hacker can get into your computer are through those same areas that the updates are used to patch.

Fourth, make sure to practice safe internet use: don't accept files from strangers; don't directly connect to anybody you don't already know and trust-direct connections reveal your IP, the 'address' of your computer, which is needed for them to know how to break in; don't run any programs that you aren't sure of the source. Use common sense, and this step shouldn't be too difficult.

Finally, if you have a friend who's adept with computers, see if you can have their help securing your computer, and checking up on it now and then to ensure that you have everything you need to keep your computer safe.

No computer is ever entirely safe from hackers-but you can take steps to keep the dangers to a minimum. All it requires is some common sense and some vigilance, making sure to keep up-to-date with all the news as it happens.